main.htm

html>

body>

form action="login.asp" method="Post">

input type="text" name="username" size="20"> 账号br>

input type="password" name="password" size="20"> 密码br>

input type="submit" value="进入">

/form>

/body>/html>

login.asp

%@Language=VBScript%>

%Response.Buffer = True%>

html>

body>

%

UserName = Request.Form("username")

Password = Request.Form("password")

Set MyConn=Server.CreateObject("ADODB.Connection")

MyConn.Open "Provider={Microsoft Access Driver (*.mdb)};

DBQ=D:\suifengqiwu\databases\test.mdb"

SQL = "Select * From tblLogin"

Set RS = MyConn.Execute(SQL)

If UserName = RS("UserName") And Password = RS("Password") Then

  Session("allow") = True

!-----连接保护的页面------->

Else

  Response.Redirect "main.asp"

  RS.Close

  MyConn.Close

  Set RS = Nothing

  Set MyConn = Nothing

End If

%>

/body>/html>

    做好了上面两个程序，再完善一下外围：把global.asa中的Session_Onstart加上 Session("allow") = False 语句，再在要保护的网页中加入下面的语句：

% @Language=VBScript %>

% Response.Buffer = True %>

% If session("allow") = False Then Response.Redirect "main.asp" %>

[1]